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(54) System for distributing files containing digital data using a computer network 



(57) A system for distributing files containing digital 
data, by using a telematic network, allows the remote 
booking of a plurality of files, through a personal com- 
puter (12) or a cellular phone (10), the choice of a sup- 
port (16) onto which said files are to be recorded, and 
the subsequent collection of the support at a chosen 
point of sale (8). Moreover the system guarantees the 
quality, the origin, the safeguard of the copyrights relat- 
ed with the files recorded onto the support and delivered 
to the client, and the protection of the material against 
any duplication until the production and delivery of the 
support to the client to which the material is destined. 




FIG. 1 



Ql 
LU 



Printed by Jouve. 75001 PARIS (FR) 



1 



EP 1 209 638 A1 



2 



Description 

[0001] The present invention relates to distribution of 
files containing digital data by using a telematic network. 
[0002] More particularly, the invention concerns a 
system for distributing and storing onto a suitable sup- 
port a set of files, music pieces, audio/video programs 
or text directly booked by a client. 
[0003] The recent diffusion of electronic commerce 
via Internet, due to a more and more increasing diffusion 
of personal computers in the families, has created new 
commercial opportunities as far as distribution and com- 
merce of files, music pieces, video films or texts are con- 
cerned. 

[0004] In effect, commercial Internet sites are at 
present available through which the user can download 
on his/her own computer music pieces in compressed 
digital format (format MP3 is very widespread), or short 
video films, also in compressed format, text files, such 
as books in electronic format, or computer programs. 
[0005] Indeed, such systems offer a lot of advantages 
to the consumer: actually he/she can choose, and then 
buy, only the products of interest for him/her and can 
create, on his/her own personal computer, a personal 
collection of files or music pieces. 
[0006] Yet, even if those systems are very flexible and 
powerful, their diffusion is at present limited by a number 
of factors: for instance, notwithstanding the use of very 
advanced compression algorithms, the files being trans- 
ferred still have big sizes and, at the present connection 
rates, demand rather long transfer times. 
[0007] Moreover, the compression algorithms una- 
voidably impair the quality of a music piece, or of a film, 
so that the product bought by the consumer never has 
the same quality as the original piece. 
[0008] The object of the invention is to provide a sys- 
tem for distributing and storing onto a suitable support 
a compilation of pieces directly chosen by a client, which 
system ensures at the same time the maximum flexibility 
and easiness of use. 

[0009] Another object is to provide a system allowing, 
via Internet, the creation of a compilation of pieces with 
audio/video quality identical to that of the original piece, 
so that the drawbacks of the prior art are no longer 
present. 

[0010] The above and other objects of the invention 
are achieved by a distribution system made in accord- 
ance with the present invention, as claimed in the ap- 
pended claims. 

[0011] The system made in accordance with the in- 
vention can be used for distributing any kind of digital 
file, while ensuring observance of the copyright laws. 
[0012] The above and other objects of the invention 
will become more apparent from the description of a pre- 
ferred embodiment, with reference to the accompanying 
drawings, in which: 

Fig. 1 is a block diagram of the architecture of the 



distribution system made in accordance with the 
present invention; 
- Fig. 2 is a block diagram of a detail of the system 
shown in Fig. 1; and 
5 - Fig. 3 is a flow chart showing the distribution proc- 
ess implemented in accordance with the present in- 
vention. 

[0013] Referring to Fig. 1, a system for distributing 
10 files containing digital data by using a telematic network, 
such as an Internet network, a dedicated intranet net- 
work or a network comprising a plurality of interconnect- 
ed networks, comprises: 

15 - a store 4, connected to the network, where a plural- 
ity of files of different kinds and/or formats, for in- 
stance music pieces, video films, text files or com- 
puter programs, are stored; moreover several 
stores 41 ...4n, even located in physically different 

20 locations, can be connected to the same network; 
a plurality of distribution points 8, also connected to 
the telematic network, for the file recording onto a 
suitable support 16 and the subsequent delivery to 
the client; 

25 - a plurality of telematic terminals 10, 12, connected 
to the network, for the choice and the booking by 
the client of one or more files present in store 4; 
a central processor 2, connected to the telematic 
network and centrally managing the operations 

30 concerning the file booking through terminals 10, 
12, the file transfer to a selected distribution point, 
and the payment of copyright fees to authority or 
authorities 6 owning such copyrights, as described 
in detail hereinafter. 

35 

[0014] The structure of the constituent parts of the 
above-disclosed system will be now described in detail. 
[001 5] Each store 4 is substantially a server computer 
equipped with: a high memory capacity 4a, implement- 

40 ed for instance by means of rigid disks or optical disks; 
an interface towards an acquisition network 9 connect- 
ing the store with manager 2; means 4b arranged to per- 
form, if necessary, a format conversion on the file to be 
transferred; and means 4c for encoding the same file. 

45 in effect, a format conversion can be necessary, for in- 
stance in case of music pieces, from 1 6-bit, 44 kHz PCM 
standard of the CDs to MPEG2 layer 3 format (known 
as MP3 format). 

[001 6] Moreover, for security reasons, the files trans- 
50 ferred from store 4 to the corresponding distribution 
point 8 are encoded in block 4c by using a personalised 
encoding key, such that a single distribution point, or a 
few distribution points in case of broadcast transmis- 
sion, can receive and decode the file. 
55 [0017] The files received at the distribution points are 
in fact stored into the local buffer in encoded format, so 
as to ensure the maximum security even in case the 
whole local store is fraudulently taken away. 
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[0018] However the system architecture applies to the 
distribution of any kind of data, by signalling at the book- 
ing the desired storage support and format. 
[001 9] A single store 4 may be provided, or the store 
can be subdivided into a plurality of stores 41. ..4n, all 5 
having the same architecture: such stores can even be 
located in different locations, provided they are connect- 
ed to the manager 2 through acquisition network 9. 
[0020] Connection between manager 2 and distribu- 
tion points 8 is established by means of a broadband 
network 14, e. g. an optical fibre link or a satellite link. 
A satellite network allows broadcasting a same file to all 
distribution points with a unitary cost in terms of occu- 
pied bandwidth. That opportunity may be very useful 
when, e.g. in the case of a system for distributing music 
pieces, the launch of a new successful record takes 
place and many requests of the same pieces at all dis- 
tribution points are expected. 
[0021] Distribution points 8^ 8 2 , 8 n are independent 
apparatuses, which are located for instance at a shop 
of music products, a bookshop or a software shop, and 
are equipped with a connection to broadband network 
14 and with a device for recording the requested files 
onto a proper support. 

[0022] Fig. 2 shows one such apparatus in detail. The 
core of apparatus 8 1 is a computer 24, for instance a 
personal computer, coupled with: a local buffer or cache 
memory 22, in particular a rigid disk; a recording device 
26, in the present instance a masteriser for supports like 
CDs and/or DVDs 16; and a device 28 for printing im- 
ages and/or texts containing information concerning the 
recorded files and for packaging support 16 into a suit- 
able container 30. Apparatus 8 1 is connected to broad- 
band network 14 through a connection interface 23. 
[0023] Cache memory 22 is an essential distinctive 
and optimising element of the distribution system. Local 
storage in effect allows dispensing with multiple trans- 
fers of a file, upon multiple consecutive requests, with 
clear advantages in terms of time and especially of 
costs, since broadband networks are at present very ex- 
pensive. The operation of cache memory 22 is similar 
to the operation of a conventional cache memory: it ac- 
cumulates data until it becomes full, and then starts 
eliminating the least requested files to create space for 
the most recently transferred files, while keeping the 
most requested files always available. 
[0024] The distribution system, while being physically 
distributed, is based on a strong central control: actually, 
all parts are controlled by central processor 2, disclosed 
in detail hereinafter. 

[0025] Apparatuses 8 1f 8 2 , 8 n located at the distribu- 
tion points are implemented by the system manager and 
controlled through central processor 2. The distributor 
(meaning by this term the shopkeeper) cannot interact 
with the apparatuses themselves in order to locally op- 
erate: thus it is impossible to copy file sets or individual 
files, stored for instance in cache memory 22, without a 
communication among the software modules installed 



at the distribution point, at the manager and at the owner 
of the file-related copyrights. 

[0026] Each distribution point 8 further comprises en- 
abling means enabling its operation only upon reception 
of a unique identification code (PIN) sent by central con- 
troller 2 whenever the system is activated. 
[0027] Should the distributor need to use the same 
system to produce the material upon request from a cli- 
ent, he will use a user interface like terminal 12, exactly 
acting like a client. 

[0028] Moreover apparatus 8 can also be equipped 
with hardware protections, like seals and anti-burglar 
devices, even if software protections, data encoding 
systems and transmission channel ciphering already 
ensure a global protection. 

[0029] The client of the service can use, in order to 
gain access to the system, one of the systems and de- 
vices made available by the development of the so- 
called access products and technologies. For instance, 
access to the service is possible by using a personal 
computer 12 having a connection to an access network 
11, for instance an Internet network, or a cellular phone 
equipped with WAP technology, a UMTS terminal and 
the like. 

[0030] Moreover, by adapting the service access in- 
terfaces at the server's side, that is access network 11 , 
it is possible to have available both conventional book- 
ing techniques, such as a simple telephone request, and 
more innovative technologies such as speech recogni- 
tion. Actually, it is always possible to adapt the user in- 
terface while leaving the overall system functions unaf- 
fected. 

[0031] Central processor 2 is a network server con- 
nected to one or more telematic networks implementing 
the logic functions related with the access by the user 
terminals for order collection (access network 11), com- 
munication to companies/authorities owning the copy- 
rights (private network 13), access to the original files 
(acquisition network 9) and distribution toward produc- 
tion points (distribution network 14). 
[0032] The server manages the whole system thanks 
to a suitable program, the functions of which will be now 
described in detail. The program can be seen as con- 
sisting of a plurality of "modules", mutually communicat- 
ing and possibly hosted on several processors, each 
module being entrusted with a specific function. 
[0033] A first module manages interfacing telematic 
terminals 10, 12 with access network 11 and takes care 
of the client registration procedures, the identification 
procedures and the collection of file bookings. Registra- 
tion of a new client is a basic step for the use of the 
system: in effect, during the registration step, a personal 
"profile", containing personal data, preferences and da- 
ta necessary for payment of the services requested, 
such as the data of a credit card or a prepaid card, is 
associated with the client. 

[0034] A second module carries out the count and 
identification of the booked files and manages debiting 
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the client with the cost of the same files, by using the 
information related with the client* s credit card or the 
prepaid card previously sold to the client by the service 
operator. 

[0035] The same module moreover manages com- 5 
munication, through private network 13, with authorities 
6 v ..6 n owning the copyrights related with the files 
booked, for instance by generating a report for the pay- 
ment of the corresponding copyright fees. 
[0036] A third module is on the contrary entrusted with 
communication with distribution points 8 and with store 
4, to check for the presence of the booked files (that, in 
effect, could already be present in the cache memory of 
distribution point 8), and to manage the file transfer from 
store 4 to the distribution point concerned. 
[0037] Acquisition network 9, access network 11 , pri- 
vate network 13 and distribution network 14 have been 
shown as separate logic networks, but they could be im- 
plemented by one or more physical networks. 
[0038] The distribution system previously described is 
wholly transparent to the kind of material that can be 
distributed and that is generally referred to as "files". 
[0039] Therefore the formats only affect the architec- 
tural parameters that have been used and not the result, 
which is always and only the distribution from a central 
store 4 to a production terminal 8 for direct recording 
onto a digital support 16. 

[0040] The kind of support 16 often is determined by 
the kind of the requested data: If for instance the store 
in which the selection and the service have been carried 
out contains a set of records made available in CD for- 
mat, the CD will be the process output. The same will 
occur in the case of DVD, SACD, and other formats. 
[0041] The above-described system ensures copy- 
right safeguard and protection of the contents being 
transmitted. Actually, only the manager, represented by 
central processor 2, is responsible for service provision. 
[0042] To ensure copyright safeguard, right owning 
authority 6 is equipped with a software module, which 
carries out a dialogue with a corresponding module in- 
stalled at the central processor 2 of the service operator. 
[0043] Such modules exploit the technology conform- 
ing to Recommendation X509 (release 3 or higher) for 
the transmission channel protection (ciphering), the 
electronic signature and the non-rejection of the trans- 
action through the mutual identification of the interacting 
subjects/objects. To this end the system uses the Public 
Key Infrastructure (PKI) architecture, enabling the rec- 
ognition of own Certification Authorities (CAs) for the 
whole of its clients and distributors, or of any other CA 
recognition of which has been agreed to by the parties 
by virtue of a contract. 

[0044] Copyright fee accounting is based on the re- 
quests contained in the order, upon acknowledgement 
by the client of the correctness and completeness of the 
list of requested material. 

[0045] The software entrusted with accounting and at- 
tributing the copyright fees must be certified by the right 



owning authority 6, which has access to the source 
code. Compilation for transformation into an executable 
code will be carried out in the presence or under the di- 
rect control of owner 6. The executable code will be as- 
sociated with a unique string (referred to as "fingerprint") 
by applying hashing algorithms with digest capability (i. 
e. the capability of generating strings with predeter- 
mined lengths that represent a digest of the original 
message and have a particularly low repetition proba- 
bility, of the order of 10" 15 , in case of a variation of the 
original contents; for instance, a system presently used 
is named MD5). 

[0046] The above measure prevents the system man- 
ager from modifying or even replacing the software 
module entrusted with copyright fee accounting. 
[0047] Moreover, for each set of files the copyrights 
of which can be attributed to a single owning authority 
6, an identification code (rights certificate) is generated 
comprising: a manager identification code, a buy ticket 
of the produced set, and identification codes of the indi- 
vidual products concerning owning authority 6. 
[0048] The certificate will be digitally signed by au- 
thority 6 and stored by authority 6 and by manager 2, 
and will be supplied to the client together with the prod- 
uct that has been prepared. 

[0049] File booking and distribution takes place ac- 
cording to the following process, shown in detail in the 
flow chart of Fig. 3. The numbers associated with the 
operations listed hereinafter correspond with the refer- 
ence numerals allotted to the blocks shown in Fig. 3. 
[0050] 40 - The client gains access, as disclosed 
above, to the module in central processor 2 that carries 
out the client recognition and profile allotment; the sys- 
tem obtains from the profile also the usual client's loca- 
tion. 

[0051] 42 - The client chooses the material by using 
a catalogue-like form; if the terminal employed allows 
so (for instance, by means of a web navigation program) 
the client may effect a pre-listening or a preview of the 
material chosen, by taking from store 4 a portion of the 
files chosen, in compressed format and of reduced qual- 
ity. While the client is looking at the catalogue and is 
choosing the material, the system supplies the client 
with a display, in digital or graphical format, of the space 
needed by the files chosen, and the total file cost; more- 
over in this step the system carries out on the requested 
files base processing, if any, that can be related with the 
production step (e. g. volume normalisation and adjust- 
ments of the dynamic range). 

[0052] 44 - The client is asked to check the composi- 
tion of the order and to accept it in order the operations 
can go on. 

[0053] 46 - The client chooses the production support. 
[0054] 48 - A check is made on whether the support 
is suited to the requested material. 
[0055] 50 - Distribution point 8 is identified, i.e. the op- 
timum production point in respect of the automatically 
computed client's location, by relating the location with 
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the map of the distribution points in the area; taking into 
account that the client's location may vary (especially if 
access systems characterised by a high mobility are 
used, such as a WAP cellular phone), the process will 
request a confirmation of the determination of the cli- 5 
enfs access point, before carrying out the computation 
required for the choice of the distribution point. If the cel- 
lular telephone systems allow so, the datum being pro- 
posed could also take into account the position dynam- 
ically obtained by the cellular network. 10 
[0056] 52 - Production time is evaluated. The evalua- 
tion is strictly related with the following basic parame- 
ters: size of the original data, time needed for possible 
format conversion, size of the data to be transferred, ci- 
phering time for channel protection, rate on the channel 15 
connecting the manager and the distribution point, de- 
coding time of the protection ciphering, production 
queue at the devices installed at the distribution point, 
and speed of the production device. Each of the above 
parameters is known to the system thanks to the knowl- 20 
edge of store 4 and of the data stored therein, the knowl- 
edge of the topology of the network connecting the man- 
ager and the distribution point, the knowledge of the al- 
gorithms for ciphering at the data transmission end and 
decoding at the data reception end, and the knowledge 25 
of the technical features of the production devices, for 
instance a masteriser. 

[0057] 54 - A preliminary dialogue is carried out be- 
tween manager 2 and distribution point 8 to communi- 
cate the list and the features of the material to be pro- 30 
duced and to perform a check on the local availability of 
copies (in cache memory 22) and on the production 
queues present on the chosen device. 
[0058] 56 - The final acceptance of the order by the 
client is checked; in the negative, the process stops. 35 
[0059] 58 - A unique buy ticket is generated and is 
delivered to the client (through different procedures de- 
pending on the access terminal: direct print, SMS mes- 
sage, and so on), by associating it to the whole of the 
material ordered to the distribution point. *o 
[0060] 60 - The cost of the service is charged by using 
the mechanism associated with the client profile (credit 
card or prepaid card). 

[0061] 62 - The manager contacts the distribution 
point, through software modules and protocols based 45 
on suitably developed IP network standards, by sending 
the list (directory) of the material to be produced; in case 
the material is not available at the distribution point, it is 
accounted and taken from store 4; if part or all of the 
data, because of the caching optimisation carried out by so 
the system, are already present at the distribution point, 
the presence of the cached material will be simply sig- 
nalled and the missing material will be sent. 
[0062] 64 - Upon the complete availability of the whole 
set of material, the software in distribution point 8 will 55 
confirm the acceptance of the delivery and will schedule 
the production of the requested contents on support 16. 
The contents will be a true copy of the original items, if 



the client has requested no production processing; oth- 
erwise such contents will be the copy resulting from the 
requested processing. In any case no addition will take 
place of external information or processing that is not 
defined by the interface application for material selec- 
tion used by the client. 

[0063] 66 - Production comprises printing a label 30, 
associated with support 16 and containing at least a 
copy of the buy ticket, guaranteeing the material collec- 
tion to the client, and the list of the files or pieces con- 
tained in the support. 

[0064] 68 - The manager, upon receiving the confir- 
mation from the distribution point, will inform the right 
owning authority or authorities 6 v ..6 n , via the telematic 
network and by adopting the software architecture de- 
scribed above, of each item concerning the authority or 
authorities themselves; the manager will receive from 
the authority or authorities the signed codes referred to 
hereinabove as "rights certificates''; such certificates will 
be stored by the same authority 6 and by manager 2 (in 
the file of the transactions carried out) and sent to pro- 
duction point 8 to supplement the label of the produced 
material by associating the certificates to the buy ticket 
of the set of produced material. 



Claims 

1 . A system for distributing files containing digital data, 
by using a telematic network (9, 11, 13, 14), char- 
acterised in that it comprises: 

at least one store (4), connected to said 
telematic network (9, 11, 13, 14) and storing a 
plurality of said files; 

a plurality of distribution points ^...Sp), con- 
nected to said telematic network (14) and com- 
prising each means (24) for receiving one or 
more files from said at least one store and stor- 
ing them into a local buffer (22), and means (26) 
for recording said one or more files onto a suit- 
able support (16); 

at least one telematic terminal (10, 12), con- 
nected to said telematic network (11), for the 
choice and the booking by a client of one or 
more files present in said at least one store (4); 
a central processor (2), connected to said 
telematic network (9, 11, 13, 14), and compris- 
ing means for collecting the bookings coming 
from said at least one telematic terminal (10, 
12), means for counting and identifying the 
booked files, means for debiting the client with 
the cost associated with the booked files, 
means for generating a report for the payment 
of copyright fees to an authority (6 v ..6 n ) owning 
such rights, and means for transferring said one 
or more files from said at least one store (4) to 
at least one of said distribution points (8). 
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2. A system according to claim 1, wherein said 
telematic network (9, 11, 13, 14) is an internet/in- 
tranet network. 

3. A system according to claim 1 , wherein said at least 
one telematic terminal (12) is a personal computer 
equipped with a connection to an access network 
(11) and with a program allowing connection with 
said central processor (2) for the choice and the 
booking of said one or more files. 

4. A system according to claim 1 , wherein said at least 
one telematic terminal (10) is a cellular phone 
equipped with WAP, UMTS or similar facilities. 

5. A system according to claim 3 or 4, wherein said at 
least one telematic terminal (10, 12) comprises 
means for taking at least one portion of a file from 
said at least one store, to allow a pre-listening or a 
preview to the client. 

6. A system according to claim 1 , wherein said at least 
one telematic terminal (10, 12) comprises means 
capable of displaying a list of chosen files, and 
means for computing and displaying the residual 
space on said support and the overall cost of the 
chosen files. 

7. A system according to claim 1 , wherein said at least 
one telematic terminal (12) is located at one of said 
distribution points (8). 

8. A system according to claim 1 , wherein said plural- 
ity of distribution points is connected with said cen- 
tral processor through a broadband telematic link 
(14). 

9. A system according to claim 8, wherein said broad- 
band telematic link (14) is a satellite link. 

10. A system according to claim 8, wherein said broad- 
band telematic link (14) is an optical fibre link. 

11. A system according to claim 1, wherein said local 
buffer (22) is a cache memory in which a received 
file remains stored for a variable time related with 
the number of the requests made in that time for 
that file, whereby the most requested files at a dis- 
tribution point remain available at the distribution 
point for longer time. 

12. A system according to claim 1 , wherein said one or 
more files are transferred from said at least one 
store (4) to a corresponding distribution point (8) in 
compressed digital form. 

1 3. A system according to claim 1 , wherein said at least 
one telematic terminal (10, 12) allows choosing the 



kind of support (16) used for recording. 

14. A system according to claim 1 , wherein said at least 
one distribution point (8) further comprises means 

5 (28) for printing images and/or texts containing in- 
formation concerning said one or more files chosen, 
for personalising said support (16). 

15. A system according to claim 1 , wherein each distri- 
10 bution point (8) comprises enabling means enabling 

its operation upon reception of a unique identifica- 
tion code (PIN) from said central processor (2). 

16. A system according to claim 1 , wherein said means 
15 for generating a report for the payment of the rele- 
vant copyright fees to the authority (6 v ..6 n ) owning 
such rights generate a unique identification code 
which is sent to the distribution point and is subse- 
quently recorded or printed onto the support, said 

20 unique identification code identifying said means for 
generating said report. 

17. A system according to any preceding claim, where- 
in the transfer of a file from said at least one store 

25 (4) to a corresponding distribution point (8) takes 
place in encoded form, by using a different encoding 
key for each distribution point, so that only one or a 
few distribution points can decode said file and 
store it onto the corresponding support (16). 

30 

18. A system according to any preceding claim, where- • 
in said files are music pieces and said support is a 
compact disc. 

35 19. A method for the choice and the booking, by a client, 
of files containing digital data by means of a system 
according to any preceding claim, characterised in 
that it comprises the following steps: 

40 - access to a central processor (2), through a re- 
mote access terminal (10, 12), for the choice 
and the booking of one or more files; 
- choice of the kind of support (16) onto which 
recording of said files is desired; 
45 - identification, by the central processor (2), of a 
distribution point (8) that is optimum in respect 
of the client's location, for recording said files 
on said support (16); 

evaluation of the time expected for the produc- 
50 tion; 

preliminary dialogue between the central proc- 
essor (2) and the distribution point (8), for com- 
municating the list of said one or more files cho- 
sen and checking whether file copies are locally 
55 available; 

transfer of the files that are missing at the dis- 
tribution point (8), by taking said missing files 
from a central store (4); 
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upon complete availability of the whole set of 
material at the distribution point (8), recording 
of said files on said support (16); 
communication, by the central processor to an 
authority (6 1 ...6 n ) owning the copyrights for the 
recorded files, of the fees pertaining to that au- 
thority, upon receipt from the distribution point 
(8) of an acknowledgement of the occurred re- 
cord ing. 
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